OIDC PKCE hardening #8512
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| push: | |
| branches: | |
| - 'main' | |
| pull_request: | |
| branches: | |
| - 'main' | |
| name: Build & Test | |
| permissions: | |
| contents: read | |
| env: | |
| CYPRESS_CACHE_FOLDER: ~/cypress-binary-cache | |
| CYPRESS_DASHBOARD_RECORD_KEY: ${{ secrets.CYPRESS_DASHBOARD }} | |
| jobs: | |
| prepare: | |
| uses: ./.github/workflows/prepare.yml | |
| secrets: inherit | |
| permissions: | |
| actions: write | |
| contents: read | |
| with: | |
| buildcache_key: buildcache-${{ github.ref }} | |
| unit: | |
| name: Unit Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: npm test --prefix core || exit 1 | |
| client_unit: | |
| name: Client Unit Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: npm test --prefix client || exit 1 | |
| plugins_unit: | |
| name: Plugins Unit Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: npm test --prefix plugins || exit 1 | |
| mock_engine: | |
| name: Mock Engine Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: bash ./test/mockengine.sh || exit 1 | |
| container_unit_tests: | |
| name: Container Unit Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: npm test --prefix container || exit 1 | |
| core_modular_unit_tests: | |
| name: Core Modular Unit Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: npm run test --prefix core-modular || exit 1 | |
| client_support_angular_unit: | |
| name: Client Support Angular Unit Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: npm test --prefix client-frameworks-support/client-support-angular || exit 1 | |
| container_e2e_tests: | |
| name: Container E2E Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| env: | |
| USE_CYPRESS_DASHBOARD: false # enable when trying to debug | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - run: bash ./container/run-container-e2e.sh || exit 1 | |
| e2e: | |
| name: Integration Tests | |
| needs: prepare | |
| runs-on: ubuntu-latest | |
| env: | |
| USE_CYPRESS_DASHBOARD: true # enable when trying to debug | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5 | |
| with: | |
| path: | | |
| ~/tmp_build | |
| ~/cypress-binary-cache | |
| key: buildcache-${{ github.ref }} | |
| - run: cp -r ~/tmp_build/* . | |
| - uses: ./.github/workflows/update-deps | |
| with: | |
| list-of-deps: 'libgtk2.0-0t64 libgtk-3-0t64 libgbm-dev libnotify-dev libnss3 libxss1 libasound2t64 libxtst6 xauth xvfb' | |
| - run: ls test | |
| - run: bash ./test/e2e-js.sh || exit 1 | |
| - run: bash ./test/e2e-angular.sh || exit 1 | |
| - run: bash ./test/e2e-client-api.sh || exit 1 | |
| docu_check: | |
| name: Check Documentation | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 | |
| with: | |
| node-version: '24.x' | |
| - run: cd ./scripts && npm ci | |
| - run: bash ./scripts/docuCheck.sh |